module Katello
  class Api::Rhsm::CandlepinDynflowProxyController < Api::V2::ApiController
    include Katello::Authentication::ClientAuthentication
    include ForemanTasks::Triggers
    include AbstractController::Callbacks

    before_action :deprecated, only: :deb_package_profile

    skip_before_action :authorize, :only => [:upload_package_profile, :upload_profiles, :deb_package_profile]
    before_action :find_host, :only => [:upload_package_profile, :upload_profiles, :deb_package_profile]
    before_action :authorize_client_or_user, :only => [:upload_package_profile, :upload_profiles, :deb_package_profile]

    skip_before_action :check_content_type

    #api :PUT, "/consumers/:id/packages", N_("Update installed packages")
    #api :PUT, "/consumers/:id/profile", N_("Update installed packages")
    #param :id, String, :desc => N_("UUID of the consumer"), :required => true
    def upload_package_profile
      User.as_anonymous_admin do
        async_task(::Actions::Katello::Host::UploadPackageProfile, @host, request.raw_post)
      end
      render :json => Resources::Candlepin::Consumer.get(@host.subscription_facet.uuid)
    end

    api :PUT, "/consumers/:id/profiles", N_("Update installed packages, enabled repos, module inventory")
    param :id, String, :desc => N_("UUID of the consumer"), :required => true
    def upload_profiles
      User.as_anonymous_admin do
        async_task(::Actions::Katello::Host::UploadProfiles, @host, request.raw_post)
      end
      render :json => Resources::Candlepin::Consumer.get(@host.subscription_facet.uuid)
    end

    api :PUT, "/systems/:id/deb_package_profile", N_("Update installed deb packages")
    param :deb_package_profile, Hash, :required => true do
      param :deb_packages, Array, :required => true do
        param :name, String, :required => true
        param :architecture, String, :required => true
        param :version, String, :required => true
      end
    end
    param :id, String, :desc => N_("UUID of the system"), :required => true
    def deb_package_profile
      upload_profiles
    end

    def find_host(uuid = nil)
      params = request.path_parameters
      uuid ||= params[:id]
      facet = Katello::Host::SubscriptionFacet.where(:uuid => uuid).first
      if facet.nil?
        # check with candlepin if consumer is Gone, raises RestClient::Gone
        User.as_anonymous_admin { Resources::Candlepin::Consumer.get(uuid) }
        fail HttpErrors::NotFound, _("Couldn't find consumer '%s'") % uuid
      end
      @host = facet.host
    end

    def authorize_client_or_user
      client_authorized? || authorize
    end

    def client_authorized?
      authorized = authenticate_client && User.consumer?
      authorized = (User.current.uuid == @host.subscription_facet.uuid) if @host && User.consumer?
      authorized
    end

    def deprecated
      ::Foreman::Deprecation.api_deprecation_warning("it will be removed in Katello 3.15 - please use /consumers/:id/profiles instead.")
    end
  end
end